Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3136372e3234392e37322e302f32322d3232203d3e203134383638.roa
File:                     3136372e3234392e37322e302f32322d3232203d3e203134383638.roa (raw, json)
Hash identifier:          18wSGPlww6n+49AzSRD5dWeC6InaPLRI00WfvnQ2kxw=
Subject key identifier:   0E:71:3D:A8:3B:51:ED:01:A9:00:90:1A:A3:C6:92:C8:06:BB:AC:AA
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       2DBA0FBACC4E6D724A1C451F07355075093388
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3136372e3234392e37322e302f32322d3232203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:33 +0000
ROA not before:           Mon 17 Aug 2026 17:43:33 +0000
ROA not after:            Mon 16 Aug 2027 17:48:33 +0000
asID:                     14868
IP address blocks:        167.249.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ba:0f:ba:cc:4e:6d:72:4a:1c:45:1f:07:35:50:75:09:33:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:33 2026 GMT
            Not After : Aug 16 17:48:33 2027 GMT
        Subject: CN=0E713DA83B51ED01A900901AA3C692C806BBACAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:81:5b:e3:85:64:65:9e:e4:af:7b:f8:c5:
                    1d:79:07:d8:5a:ed:fb:4c:48:7c:9d:82:24:a9:90:
                    80:3b:6f:0c:28:d6:d2:02:97:86:84:fe:dc:26:6c:
                    dc:7b:b2:cb:06:71:7d:30:13:10:43:b6:a4:60:cc:
                    b3:84:2b:fd:55:bc:f1:68:59:da:f2:39:04:13:d5:
                    05:0e:87:2f:7a:1f:84:3c:f4:53:ce:8a:11:49:dd:
                    21:90:c0:0a:6b:03:df:c6:84:bd:0b:a3:8a:9c:7d:
                    e7:a7:be:49:2c:ec:da:55:b4:af:ad:9e:b7:63:c5:
                    79:6e:8b:bc:e0:91:7f:71:b3:dd:82:98:96:06:60:
                    ed:57:3d:1f:04:9f:0e:8e:7a:fd:95:e2:88:b9:37:
                    89:31:a6:07:67:41:4b:35:56:32:97:e3:ea:d2:8e:
                    87:2c:14:af:99:96:f2:6e:4a:ee:db:e3:e6:de:d5:
                    ac:bd:c3:f6:11:1e:95:f6:ff:fc:11:7c:55:90:67:
                    f0:1f:75:b3:c9:28:6d:de:a3:4c:a6:c7:6d:95:09:
                    7e:54:d3:84:45:bf:f2:43:2f:e9:5c:11:28:b9:c9:
                    a3:4d:1b:c2:1c:33:62:f0:3c:e2:44:6a:0a:0d:84:
                    3c:6c:5e:f6:4c:88:73:bc:00:f6:ff:2c:13:a8:af:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:3D:A8:3B:51:ED:01:A9:00:90:1A:A3:C6:92:C8:06:BB:AC:AA
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3136372e3234392e37322e302f32322d3232203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:19:f1:7c:dc:3d:f8:f7:3c:20:6e:52:d1:97:79:bd:9a:
         23:a3:39:76:14:47:e9:2b:4e:8b:77:0a:15:96:37:1d:59:5e:
         fc:4c:39:61:83:0e:2a:92:b3:81:06:ae:f9:a5:37:54:da:d5:
         70:f0:ef:82:a3:9d:f9:40:ba:f4:de:a5:6a:77:77:76:b7:b6:
         cb:c8:18:0f:79:a0:b9:fc:c9:4d:cb:92:64:ed:bd:83:67:2e:
         99:bf:22:e0:f0:5b:fa:5f:a6:fa:33:a8:cf:17:20:b4:c2:26:
         58:b1:5f:1b:2d:ad:a3:3c:1b:08:f0:11:7c:da:ef:32:fc:4f:
         75:33:46:80:32:73:84:4b:8a:6a:c0:30:fa:23:65:0a:4d:06:
         98:df:4e:03:f5:95:ef:8a:e9:28:0c:1d:df:00:f0:f0:64:18:
         68:9b:0d:cd:7b:70:81:cb:59:f5:88:3d:67:32:af:40:77:f8:
         d9:a1:93:2b:d4:e4:94:2a:82:bb:cb:9b:ae:d3:30:e1:e3:61:
         50:f6:d6:56:a5:04:a8:c6:32:af:50:06:e9:08:2f:93:5d:9d:
         c2:2a:0a:ee:67:0e:8c:9e:67:2c:ba:f7:6b:2e:ef:25:0d:21:
         87:26:1a:f0:18:de:48:a0:d7:38:dd:c9:24:d5:36:e0:c8:48:
         54:26:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:31 2026 by rpki-client